DisclosureLens
PhysicalHealthcareManufacturingHealthcareTheftCustomer Data InvolvedEmployee Data InvolvedIdentity (basic)Government IDHealth (basic)MediumContained

Santa Cruz Biotechnology, Inc.

bd_b1ae7a75e8e1e802 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Dec 18, 2017

Filed

Feb 22, 2018

To disclose

9 weeks

Affected

4state residents only

Linked

6 filings

Confidence

64%
Full breach record for Santa Cruz Biotechnology, Inc. →

Santa Cruz Biotechnology, Inc. issued a supplemental notice regarding a burglary at its Santa Cruz office on December 17, 2017. Two HR computers were stolen. Records containing PII, SSNs, and health insurance info were stored on at least one device. The company offered one year of identity protection services.

Incident timeline

undetected · 1 days
discovery → filing · 9 weeks / 66 days

Dec 17, 2017

Begins

Dec 18, 2017

Discovered

Feb 22, 2018

Filed

vs. sector median

2 wks faster

This filing is one of 6 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (5) · sorted by filing gap

Show 1 more filing ↓up to 36d gap

Filing propagation · 6 filings · 4 states

View merged incident ↗
California State AGFeb 22 · first
New Hampshire State AGFeb 22 · first
Montana State AGFeb 22 · first · this page
Massachusetts State AG+4d
California State AG+36d
New Hampshire State AG+36d

Pattern: first filing Feb 22 (CA), last Mar 30 (NH) — a 36-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.